<<<<<<< HEAD
#include <stdio.h>
#include <stdlib.h>
#include <stdint.h>
#include <time.h>

#define IRRE_poly 0x1b

//扩展密钥
unsigned char exp_key[4][44];

// GF(2^8)域加法,xnor
unsigned char gf_add(unsigned char a, unsigned char b){
    return a^b;
}

//GF(2^8)域乘法
//不可约多项式系数为IRRE_poly
unsigned char gf_mul(unsigned char a, unsigned char b){
    unsigned char mul=0, msb=0;

    for(int i=0; i<8; i++){
        if(b & 1){            //如果b最低位等于1，或者右移到为1
            mul = mul ^ a;    
        }        
        msb = a & 0x80;
        a <<= 1;
        if(msb) a = a ^ IRRE_poly;
        b >>= 1;
    } 
    return mul;
}

//测试gf_mul
/*
int main(){
    unsigned char a, b,m_ab, x, y,m_xy;
    a= 0x78;
    b= 0x95;
    x= 0x67;
    y= 0xaf;
    m_ab = gf_mul(a, b);
    m_xy = gf_mul(x, y);
    printf("m_ab=%x ; m_xy=%x", m_ab, m_xy);
}*/


// s_box

unsigned char s_box[16][16] = {
//    0     1     2     3     4     5     6     7     8     9     a     b     c     d     e     f      
    {0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5, 0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76}, //0
    {0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0, 0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0}, //1
    {0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc, 0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15}, //2
    {0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a, 0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75}, //3
    {0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0, 0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84}, //4
    {0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b, 0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf}, //5
    {0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85, 0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8}, //6
    {0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5, 0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2}, //7
    {0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17, 0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73}, //8
    {0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88, 0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb}, //9
    {0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c, 0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79}, //a
    {0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9, 0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08}, //b
    {0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6, 0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a}, //c
    {0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e, 0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e}, //d
    {0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94, 0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf}, //e
    {0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68, 0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16}  //f
};

//逆s盒
unsigned char inv_s_box[16][16] = {
	// 0     1     2     3     4     5     6     7     8     9     a     b     c     d     e     f
	{0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38, 0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb}, // 0
	{0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87, 0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb}, // 1
	{0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d, 0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e}, // 2
	{0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2, 0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25}, // 3
	{0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16, 0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92}, // 4
	{0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda, 0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84}, // 5
	{0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a, 0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06}, // 6
	{0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02, 0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b}, // 7
	{0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea, 0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73}, // 8
	{0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85, 0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e}, // 9
	{0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89, 0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b}, // a
	{0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20, 0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4}, // b
	{0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31, 0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f}, // c
	{0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d, 0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef}, // d
	{0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0, 0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61}, // e
	{0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26, 0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d} // f
    }; 

//列混淆矩阵
unsigned char mix_matrix[4][4] = {
   {0x02, 0x03, 0x01, 0x01},
   {0x01, 0x02, 0x03, 0x01},
   {0x01, 0x01, 0x02, 0x03},
   {0x03, 0x01, 0x01, 0x02}
};

//轮常量
unsigned char RC[4][10] = {
    {0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1b, 0x36}, 
    {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, 
    {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
    {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}
};

//字节代替变换
//字节代替变换是使用S盒置换
//输入的前四位是s盒行地址，后四位为列地址
void sub_byte(unsigned char a[4][4]){
    unsigned char a_row, a_rank;
    for(unsigned char i=0; i<4; i++){
        for(unsigned char j=0; j<4; j++){
            a_row = (a[i][j] & 0xF0)>>4;
            a_rank = a[i][j] & 0x0F;
            a[i][j] = s_box[a_row][a_rank];
        }
    }
}

//逆向字节代替
void inv_sub_byte(unsigned char a[4][4]){
    unsigned char a_row, a_rank;
    for(unsigned char i=0; i<4; i++){
        for(unsigned char j=0; j<4; j++){
            a_row = (a[i][j] & 0xF0)>>4;
            a_rank = a[i][j] & 0x0F;
            a[i][j] = inv_s_box[a_row][a_rank];
        }
    }
}

//行移位变换
//对state不同行进行不同的移位
//第i行左移i字节
void shift_row(unsigned char a[4][4]){
    unsigned char trans;
          
    //对第一行移位一列
    trans = a[1][0];
    for(unsigned int k=0; k<3; k++){
        a[1][k] = a[1][k+1];
    }
    a[1][3] = trans;
    
    //对第二行移位两列
    trans = a[2][0];
    a[2][0] = a[2][2];
    a[2][2] = trans;
    trans = a[2][1];
    a[2][1] = a[2][3];
    a[2][3] = trans;
    
    //对第三行移位三列,等同右移一列
    trans = a[3][3];
    a[3][3] = a[3][2];
    a[3][2] = a[3][1];
    a[3][1] = a[3][0];
    a[3][0] =trans;
}

//逆向行移位变换
//第i行右移i字节
void inv_shift_row(unsigned char a[4][4]){
    unsigned char trans;
          
    //对第一行右移位一列
    trans = a[1][3];
    a[1][3] = a[1][2];    
    a[1][2] = a[1][1];
    a[1][1] = a[1][0];
    a[1][0] = trans;
    
    //对第二行移位两列，右移两列与右移两列没有区别
    trans = a[2][0];
    a[2][0] = a[2][2];
    a[2][2] = trans;
    trans = a[2][1];
    a[2][1] = a[2][3];
    a[2][3] = trans;
    
    //对第三行右移位三列,等同左移一列
    trans = a[3][0];
    a[3][0] = a[3][1];
    a[3][1] = a[3][2];
    a[3][2] = a[3][3];
    a[3][3] =trans;
}

//列混淆变换
//对state矩阵做列混淆矩阵乘
void mixcom(unsigned char a[4][4]){
    unsigned char i, j;
    unsigned char s[4][4];    
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            s[i][j] = a[i][j];
        }
    }
    for(j=0; j<4; j++){
        a[0][j] = gf_mul(0x02, s[0][j])^gf_mul(0x03, s[1][j])^s[2][j]^s[3][j];
        a[1][j] = s[0][j]^gf_mul(0x02, s[1][j])^gf_mul(0x03, s[2][j])^s[3][j];
        a[2][j] = s[0][j]^s[1][j]^gf_mul(0x02, s[2][j])^gf_mul(0x03, s[3][j]);
        a[3][j] = gf_mul(0x03, s[0][j])^s[1][j]^s[2][j]^gf_mul(0x02, s[3][j]);
    }
}

//列混淆变换
//对state矩阵做列混淆矩阵乘
// |0e 0b 0d 09|
// |09 0e 0b 0d|
// |0d 09 0e 0b|
// |0b 0d 09 0e|
void inv_mixcom(unsigned char a[4][4]){
    unsigned char i, j;
    unsigned char s[4][4];    
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            s[i][j] = a[i][j];
        }
    }
    for(j=0; j<4; j++){
        a[0][j] = gf_mul(0x0e, s[0][j])^gf_mul(0x0b, s[1][j])^gf_mul(0x0d, s[2][j])^gf_mul(0x09, s[3][j]);
        a[1][j] = gf_mul(0x09, s[0][j])^gf_mul(0x0e, s[1][j])^gf_mul(0x0b, s[2][j])^gf_mul(0x0d, s[3][j]);
        a[2][j] = gf_mul(0x0d, s[0][j])^gf_mul(0x09, s[1][j])^gf_mul(0x0e, s[2][j])^gf_mul(0x0b, s[3][j]);
        a[3][j] = gf_mul(0x0b, s[0][j])^gf_mul(0x0d, s[1][j])^gf_mul(0x09, s[2][j])^gf_mul(0x0e, s[3][j]);
    }
}

//轮密钥加变换
//对应位置的异或，不过需要注意扩展密钥的位置
void AddRoundKey(unsigned char a[4][4], unsigned char round)
{
    unsigned char i, j;
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            a[i][j] = gf_add(a[i][j], exp_key[i][4*round+j]);
        }
    }
}

//密钥扩展算法
//密钥输入16字节的矩阵
void KEY_EXP(unsigned char key[4][4]){
    unsigned char temp[4], i, j;
    //前四列直接对应
    for(i=0; i<4; i++)
    {
        for(j=0; j<4; j++)
        {
            exp_key[j][i]=key[j][i];
        }
    }
    //后面存在转化关系
    for(i=4; i<44; i++){ 
        //i是4的倍数时，g函数使得 
        if((i%4)==0)
        {
            unsigned char B[4][2];//使用B去作为中间变量
            //左移一位
            B[0][0] = exp_key[1][i-1];
            B[1][0] = exp_key[2][i-1];
            B[2][0] = exp_key[3][i-1];
            B[3][0] = exp_key[0][i-1];            
            //s盒置换,对移位后的值置换
            unsigned char key_exp_row, key_exp_rank;
            for( j=0; j<4; j++)
                {
                    key_exp_row = (B[j][0] & 0xF0)>>4;
                    key_exp_rank = B[j][0] & 0x0F;
                    B[j][1] = s_box[key_exp_row][key_exp_rank];
                }
            //与RCj相加
            temp[0] = gf_add(B[0][1], RC[0][(i/4)-1]);
            temp[1] = B[1][1];
            temp[2] = B[2][1];
            temp[3] = B[3][1];
        }
        else
        {
            for(j=0; j<4; j++)
            {
                temp[j] = exp_key[j][i-1];            
            }
        }
        for(j=0; j<4; j++){
            exp_key[j][i]=gf_add(exp_key[j][i-4], temp[j]);
        }       
    }     
    printf("\n 输出扩展密钥：\n");
    for(i=0;i<4;i++){
        printf("\n");
        for(j=0;j<44;j++) printf(" %x " ,exp_key[i][j]);
    }   
}

void AES(unsigned char p_text[4][4], unsigned char c_text[4][4])
{
    unsigned char i, j, k, n, m;
    
    //第0轮，
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            c_text[i][j] = p_text[i][j];
        }
    }    
    AddRoundKey(c_text, 0);
    printf("\n 0:: Cypher is : ");
    for(n=0; n<4; n++){
        for(m=0; m<4; m++){
            printf(" %x", c_text[m][n]);
        }
    }
    //第1至9轮
    for(i=1; i<10; i++){
        //字节替换
        sub_byte(c_text);

        printf("\n %d:: sub_byte is : ", i);
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
        //行位移  
        shift_row(c_text);
        
        printf("\n %d:: shift_row is : ", i);
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
        //列混淆
        mixcom(c_text);
        
        printf("\n %d:: mixcom is : ", i);
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
        //轮密钥加
        AddRoundKey(c_text, i);
        
        printf("\n %d:: addroundkey is : ", i);
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
    }
    //第10轮
    //字节替换
    sub_byte(c_text);

    printf("\n 10:: sub_byte is : ");
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
    //行位移  
    shift_row(c_text);

    printf("\n 10:: shift_row is : ");
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
    //轮密钥加
    AddRoundKey(c_text, i);

    printf("\n 10:: addroundkey is : ");
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
}

//AES解密，注意与加密的相反
void DecryAES(unsigned char c_text[4][4], unsigned char p_text[4][4])
{
    unsigned char i, j, k;
    
    //第0轮，
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            p_text[i][j] = c_text[i][j];
        }
    }    
    AddRoundKey(p_text, 10);
    
    //第1至9轮
    for(i=1; i<10; i++){
        //逆行位移  
        inv_shift_row(p_text);

        //逆字节替换
        inv_sub_byte(p_text);        
        
        //逆轮密钥加
        AddRoundKey(p_text, 10-i);
        
        //逆列混淆
        inv_mixcom(p_text);        
    }
    //第10轮
    //逆行位移  
    inv_shift_row(p_text);
    //逆字节替换
    inv_sub_byte(p_text);
    //轮密钥加
    AddRoundKey(p_text, 0);
}

//测试AES模块的功能

int main(){
    //密码编码学与网络安全，p112的数据例子
    unsigned char PlainText[4][4]={
        {0x32, 0x88, 0x31, 0xe0},
        {0x43, 0x5a, 0x31, 0x37},
        {0xf6, 0x30, 0x98, 0x07},
        {0xa8, 0x8d, 0xa2, 0x34}
    };
    unsigned char key[4][4]={
        {0x2b, 0x28, 0xab, 0x09},    // k0, k4, k8, k12
        {0x7e, 0xae, 0xf7, 0xcf},    // k1, k5, k9, k13
        {0x15, 0xd2, 0x15, 0x4f},    // k2, k6, k10,k14
        {0x16, 0xa6, 0x88, 0x3c}     // k3, k7, k11,k15
    };
    unsigned char CypherText[4][4];
    //密钥扩展
    KEY_EXP(key);
    AES(PlainText, CypherText);

    unsigned int i, j;
    //密钥扩展测试
    //printf("expanded key is: ");
    //for(i=0; i<44; i++){
    //    printf("\n w%d::",i);
    //    for(j=0; j<4; j++){
    //        printf("%2x ", exp_key[j][i]);
    //    }
    //}
    printf("\n Cypher is : ");
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            printf(" %x", CypherText[j][i]);
        }
    }
}
=======
#include <stdio.h>
#include <stdlib.h>
#include <stdint.h>
#include <time.h>

#define IRRE_poly 0x1b

//扩展密钥
unsigned char exp_key[4][44];

// GF(2^8)域加法,xnor
unsigned char gf_add(unsigned char a, unsigned char b){
    return a^b;
}

//GF(2^8)域乘法
//不可约多项式系数为IRRE_poly
unsigned char gf_mul(unsigned char a, unsigned char b){
    unsigned char mul=0, msb=0;

    for(int i=0; i<8; i++){
        if(b & 1){            //如果b最低位等于1，或者右移到为1
            mul = mul ^ a;    
        }        
        msb = a & 0x80;
        a <<= 1;
        if(msb) a = a ^ IRRE_poly;
        b >>= 1;
    } 
    return mul;
}

//测试gf_mul
/*
int main(){
    unsigned char a, b,m_ab, x, y,m_xy;
    a= 0x78;
    b= 0x95;
    x= 0x67;
    y= 0xaf;
    m_ab = gf_mul(a, b);
    m_xy = gf_mul(x, y);
    printf("m_ab=%x ; m_xy=%x", m_ab, m_xy);
}*/


// s_box

unsigned char s_box[16][16] = {
//    0     1     2     3     4     5     6     7     8     9     a     b     c     d     e     f      
    {0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5, 0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76}, //0
    {0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0, 0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0}, //1
    {0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc, 0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15}, //2
    {0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a, 0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75}, //3
    {0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0, 0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84}, //4
    {0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b, 0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf}, //5
    {0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85, 0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8}, //6
    {0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5, 0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2}, //7
    {0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17, 0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73}, //8
    {0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88, 0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb}, //9
    {0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c, 0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79}, //a
    {0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9, 0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08}, //b
    {0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6, 0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a}, //c
    {0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e, 0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e}, //d
    {0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94, 0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf}, //e
    {0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68, 0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16}  //f
};

//逆s盒
unsigned char inv_s_box[16][16] = {
	// 0     1     2     3     4     5     6     7     8     9     a     b     c     d     e     f
	{0x52, 0x09, 0x6a, 0xd5, 0x30, 0x36, 0xa5, 0x38, 0xbf, 0x40, 0xa3, 0x9e, 0x81, 0xf3, 0xd7, 0xfb}, // 0
	{0x7c, 0xe3, 0x39, 0x82, 0x9b, 0x2f, 0xff, 0x87, 0x34, 0x8e, 0x43, 0x44, 0xc4, 0xde, 0xe9, 0xcb}, // 1
	{0x54, 0x7b, 0x94, 0x32, 0xa6, 0xc2, 0x23, 0x3d, 0xee, 0x4c, 0x95, 0x0b, 0x42, 0xfa, 0xc3, 0x4e}, // 2
	{0x08, 0x2e, 0xa1, 0x66, 0x28, 0xd9, 0x24, 0xb2, 0x76, 0x5b, 0xa2, 0x49, 0x6d, 0x8b, 0xd1, 0x25}, // 3
	{0x72, 0xf8, 0xf6, 0x64, 0x86, 0x68, 0x98, 0x16, 0xd4, 0xa4, 0x5c, 0xcc, 0x5d, 0x65, 0xb6, 0x92}, // 4
	{0x6c, 0x70, 0x48, 0x50, 0xfd, 0xed, 0xb9, 0xda, 0x5e, 0x15, 0x46, 0x57, 0xa7, 0x8d, 0x9d, 0x84}, // 5
	{0x90, 0xd8, 0xab, 0x00, 0x8c, 0xbc, 0xd3, 0x0a, 0xf7, 0xe4, 0x58, 0x05, 0xb8, 0xb3, 0x45, 0x06}, // 6
	{0xd0, 0x2c, 0x1e, 0x8f, 0xca, 0x3f, 0x0f, 0x02, 0xc1, 0xaf, 0xbd, 0x03, 0x01, 0x13, 0x8a, 0x6b}, // 7
	{0x3a, 0x91, 0x11, 0x41, 0x4f, 0x67, 0xdc, 0xea, 0x97, 0xf2, 0xcf, 0xce, 0xf0, 0xb4, 0xe6, 0x73}, // 8
	{0x96, 0xac, 0x74, 0x22, 0xe7, 0xad, 0x35, 0x85, 0xe2, 0xf9, 0x37, 0xe8, 0x1c, 0x75, 0xdf, 0x6e}, // 9
	{0x47, 0xf1, 0x1a, 0x71, 0x1d, 0x29, 0xc5, 0x89, 0x6f, 0xb7, 0x62, 0x0e, 0xaa, 0x18, 0xbe, 0x1b}, // a
	{0xfc, 0x56, 0x3e, 0x4b, 0xc6, 0xd2, 0x79, 0x20, 0x9a, 0xdb, 0xc0, 0xfe, 0x78, 0xcd, 0x5a, 0xf4}, // b
	{0x1f, 0xdd, 0xa8, 0x33, 0x88, 0x07, 0xc7, 0x31, 0xb1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xec, 0x5f}, // c
	{0x60, 0x51, 0x7f, 0xa9, 0x19, 0xb5, 0x4a, 0x0d, 0x2d, 0xe5, 0x7a, 0x9f, 0x93, 0xc9, 0x9c, 0xef}, // d
	{0xa0, 0xe0, 0x3b, 0x4d, 0xae, 0x2a, 0xf5, 0xb0, 0xc8, 0xeb, 0xbb, 0x3c, 0x83, 0x53, 0x99, 0x61}, // e
	{0x17, 0x2b, 0x04, 0x7e, 0xba, 0x77, 0xd6, 0x26, 0xe1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0c, 0x7d} // f
    }; 

//列混淆矩阵
unsigned char mix_matrix[4][4] = {
   {0x02, 0x03, 0x01, 0x01},
   {0x01, 0x02, 0x03, 0x01},
   {0x01, 0x01, 0x02, 0x03},
   {0x03, 0x01, 0x01, 0x02}
};

//轮常量
unsigned char RC[4][10] = {
    {0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1b, 0x36}, 
    {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, 
    {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00},
    {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}
};

//字节代替变换
//字节代替变换是使用S盒置换
//输入的前四位是s盒行地址，后四位为列地址
void sub_byte(unsigned char a[4][4]){
    unsigned char a_row, a_rank;
    for(unsigned char i=0; i<4; i++){
        for(unsigned char j=0; j<4; j++){
            a_row = (a[i][j] & 0xF0)>>4;
            a_rank = a[i][j] & 0x0F;
            a[i][j] = s_box[a_row][a_rank];
        }
    }
}

//逆向字节代替
void inv_sub_byte(unsigned char a[4][4]){
    unsigned char a_row, a_rank;
    for(unsigned char i=0; i<4; i++){
        for(unsigned char j=0; j<4; j++){
            a_row = (a[i][j] & 0xF0)>>4;
            a_rank = a[i][j] & 0x0F;
            a[i][j] = inv_s_box[a_row][a_rank];
        }
    }
}

//行移位变换
//对state不同行进行不同的移位
//第i行左移i字节
void shift_row(unsigned char a[4][4]){
    unsigned char trans;
          
    //对第一行移位一列
    trans = a[1][0];
    for(unsigned int k=0; k<3; k++){
        a[1][k] = a[1][k+1];
    }
    a[1][3] = trans;
    
    //对第二行移位两列
    trans = a[2][0];
    a[2][0] = a[2][2];
    a[2][2] = trans;
    trans = a[2][1];
    a[2][1] = a[2][3];
    a[2][3] = trans;
    
    //对第三行移位三列,等同右移一列
    trans = a[3][3];
    a[3][3] = a[3][2];
    a[3][2] = a[3][1];
    a[3][1] = a[3][0];
    a[3][0] =trans;
}

//逆向行移位变换
//第i行右移i字节
void inv_shift_row(unsigned char a[4][4]){
    unsigned char trans;
          
    //对第一行右移位一列
    trans = a[1][3];
    a[1][3] = a[1][2];    
    a[1][2] = a[1][1];
    a[1][1] = a[1][0];
    a[1][0] = trans;
    
    //对第二行移位两列，右移两列与右移两列没有区别
    trans = a[2][0];
    a[2][0] = a[2][2];
    a[2][2] = trans;
    trans = a[2][1];
    a[2][1] = a[2][3];
    a[2][3] = trans;
    
    //对第三行右移位三列,等同左移一列
    trans = a[3][0];
    a[3][0] = a[3][1];
    a[3][1] = a[3][2];
    a[3][2] = a[3][3];
    a[3][3] =trans;
}

//列混淆变换
//对state矩阵做列混淆矩阵乘
void mixcom(unsigned char a[4][4]){
    unsigned char i, j;
    unsigned char s[4][4];    
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            s[i][j] = a[i][j];
        }
    }
    for(j=0; j<4; j++){
        a[0][j] = gf_mul(0x02, s[0][j])^gf_mul(0x03, s[1][j])^s[2][j]^s[3][j];
        a[1][j] = s[0][j]^gf_mul(0x02, s[1][j])^gf_mul(0x03, s[2][j])^s[3][j];
        a[2][j] = s[0][j]^s[1][j]^gf_mul(0x02, s[2][j])^gf_mul(0x03, s[3][j]);
        a[3][j] = gf_mul(0x03, s[0][j])^s[1][j]^s[2][j]^gf_mul(0x02, s[3][j]);
    }
}

//列混淆变换
//对state矩阵做列混淆矩阵乘
// |0e 0b 0d 09|
// |09 0e 0b 0d|
// |0d 09 0e 0b|
// |0b 0d 09 0e|
void inv_mixcom(unsigned char a[4][4]){
    unsigned char i, j;
    unsigned char s[4][4];    
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            s[i][j] = a[i][j];
        }
    }
    for(j=0; j<4; j++){
        a[0][j] = gf_mul(0x0e, s[0][j])^gf_mul(0x0b, s[1][j])^gf_mul(0x0d, s[2][j])^gf_mul(0x09, s[3][j]);
        a[1][j] = gf_mul(0x09, s[0][j])^gf_mul(0x0e, s[1][j])^gf_mul(0x0b, s[2][j])^gf_mul(0x0d, s[3][j]);
        a[2][j] = gf_mul(0x0d, s[0][j])^gf_mul(0x09, s[1][j])^gf_mul(0x0e, s[2][j])^gf_mul(0x0b, s[3][j]);
        a[3][j] = gf_mul(0x0b, s[0][j])^gf_mul(0x0d, s[1][j])^gf_mul(0x09, s[2][j])^gf_mul(0x0e, s[3][j]);
    }
}

//轮密钥加变换
//对应位置的异或，不过需要注意扩展密钥的位置
void AddRoundKey(unsigned char a[4][4], unsigned char round)
{
    unsigned char i, j;
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            a[i][j] = gf_add(a[i][j], exp_key[i][4*round+j]);
        }
    }
}

//密钥扩展算法
//密钥输入16字节的矩阵
void KEY_EXP(unsigned char key[4][4]){
    unsigned char temp[4], i, j;
    //前四列直接对应
    for(i=0; i<4; i++)
    {
        for(j=0; j<4; j++)
        {
            exp_key[j][i]=key[j][i];
        }
    }
    //后面存在转化关系
    for(i=4; i<44; i++){ 
        //i是4的倍数时，g函数使得 
        if((i%4)==0)
        {
            unsigned char B[4][2];//使用B去作为中间变量
            //左移一位
            B[0][0] = exp_key[1][i-1];
            B[1][0] = exp_key[2][i-1];
            B[2][0] = exp_key[3][i-1];
            B[3][0] = exp_key[0][i-1];            
            //s盒置换,对移位后的值置换
            unsigned char key_exp_row, key_exp_rank;
            for( j=0; j<4; j++)
                {
                    key_exp_row = (B[j][0] & 0xF0)>>4;
                    key_exp_rank = B[j][0] & 0x0F;
                    B[j][1] = s_box[key_exp_row][key_exp_rank];
                }
            //与RCj相加
            temp[0] = gf_add(B[0][1], RC[0][(i/4)-1]);
            temp[1] = B[1][1];
            temp[2] = B[2][1];
            temp[3] = B[3][1];
        }
        else
        {
            for(j=0; j<4; j++)
            {
                temp[j] = exp_key[j][i-1];            
            }
        }
        for(j=0; j<4; j++){
            exp_key[j][i]=gf_add(exp_key[j][i-4], temp[j]);
        }       
    }     
    printf("\n 输出扩展密钥：\n");
    for(i=0;i<4;i++){
        printf("\n");
        for(j=0;j<44;j++) printf(" %x " ,exp_key[i][j]);
    }   
}

void AES(unsigned char p_text[4][4], unsigned char c_text[4][4])
{
    unsigned char i, j, k, n, m;
    
    //第0轮，
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            c_text[i][j] = p_text[i][j];
        }
    }    
    AddRoundKey(c_text, 0);
    printf("\n 0:: Cypher is : ");
    for(n=0; n<4; n++){
        for(m=0; m<4; m++){
            printf(" %x", c_text[m][n]);
        }
    }
    //第1至9轮
    for(i=1; i<10; i++){
        //字节替换
        sub_byte(c_text);

        printf("\n %d:: sub_byte is : ", i);
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
        //行位移  
        shift_row(c_text);
        
        printf("\n %d:: shift_row is : ", i);
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
        //列混淆
        mixcom(c_text);
        
        printf("\n %d:: mixcom is : ", i);
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
        //轮密钥加
        AddRoundKey(c_text, i);
        
        printf("\n %d:: addroundkey is : ", i);
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
    }
    //第10轮
    //字节替换
    sub_byte(c_text);

    printf("\n 10:: sub_byte is : ");
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
    //行位移  
    shift_row(c_text);

    printf("\n 10:: shift_row is : ");
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
    //轮密钥加
    AddRoundKey(c_text, i);

    printf("\n 10:: addroundkey is : ");
        for(n=0; n<4; n++){
            for(m=0; m<4; m++){
                printf(" %x", c_text[m][n]);
            }
        }
}

//AES解密，注意与加密的相反
void DecryAES(unsigned char c_text[4][4], unsigned char p_text[4][4])
{
    unsigned char i, j, k;
    
    //第0轮，
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            p_text[i][j] = c_text[i][j];
        }
    }    
    AddRoundKey(p_text, 10);
    
    //第1至9轮
    for(i=1; i<10; i++){
        //逆行位移  
        inv_shift_row(p_text);

        //逆字节替换
        inv_sub_byte(p_text);        
        
        //逆轮密钥加
        AddRoundKey(p_text, 10-i);
        
        //逆列混淆
        inv_mixcom(p_text);        
    }
    //第10轮
    //逆行位移  
    inv_shift_row(p_text);
    //逆字节替换
    inv_sub_byte(p_text);
    //轮密钥加
    AddRoundKey(p_text, 0);
}

//测试AES模块的功能

int main(){
    //密码编码学与网络安全，p112的数据例子
    unsigned char PlainText[4][4]={
        {0x32, 0x88, 0x31, 0xe0},
        {0x43, 0x5a, 0x31, 0x37},
        {0xf6, 0x30, 0x98, 0x07},
        {0xa8, 0x8d, 0xa2, 0x34}
    };
    unsigned char key[4][4]={
        {0x2b, 0x28, 0xab, 0x09},    // k0, k4, k8, k12
        {0x7e, 0xae, 0xf7, 0xcf},    // k1, k5, k9, k13
        {0x15, 0xd2, 0x15, 0x4f},    // k2, k6, k10,k14
        {0x16, 0xa6, 0x88, 0x3c}     // k3, k7, k11,k15
    };
    unsigned char CypherText[4][4];
    //密钥扩展
    KEY_EXP(key);
    AES(PlainText, CypherText);

    unsigned int i, j;
    //密钥扩展测试
    //printf("expanded key is: ");
    //for(i=0; i<44; i++){
    //    printf("\n w%d::",i);
    //    for(j=0; j<4; j++){
    //        printf("%2x ", exp_key[j][i]);
    //    }
    //}
    printf("\n Cypher is : ");
    for(i=0; i<4; i++){
        for(j=0; j<4; j++){
            printf(" %x", CypherText[j][i]);
        }
    }
}
>>>>>>> 69d3c22 (add new)
